General
- Target 2026-08-20_0e1c28d80c7f399629f6090544d2beac_elex_wannacry
- Size 18KB
- Sample260820-bmgesscq9v
- SHA256 6f98ae9a89f42729a0e4f3dfc6f20dd98b4814b351298e49fa1c18b4745026cc
- MD5 0e1c28d80c7f399629f6090544d2beac
- SHA1 9f3caf9524a8b2197b38c8dcb54f81b03af78d8f
- SHA512 9269fd8e8f955b31337d76d2e21b2259e9c3574208267c4c5f7ca9d58b7bbf2c39047e2d1d0a8aeb9d1c7f8e137a474f2d809cbbcdb6b6f5db014c17f8e8e87d
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//l2DgAPpq:vLoZWN6GGBZ2BbwEoP/N2EAo
- TLSH T15F8231394FC24EBAF373CAB285F7D7D6AA31F5A3F4020A1DD58507068813642A985CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_0e1c28d80c7f399629f6090544d2beac_elex_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0e1c28d80c7f399629f6090544d2beac_elex_wannacry.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0e1c28d80c7f399629f6090544d2beac_elex_wannacry
- Size 18KB
- SHA256 6f98ae9a89f42729a0e4f3dfc6f20dd98b4814b351298e49fa1c18b4745026cc
- MD5 0e1c28d80c7f399629f6090544d2beac
- SHA1 9f3caf9524a8b2197b38c8dcb54f81b03af78d8f
- SHA512 9269fd8e8f955b31337d76d2e21b2259e9c3574208267c4c5f7ca9d58b7bbf2c39047e2d1d0a8aeb9d1c7f8e137a474f2d809cbbcdb6b6f5db014c17f8e8e87d
- SSDEEP 384:vLoUqhdO7+eN6GWl1pcG4rAAAAAHZMHBfTwEoP//l2DgAPpq:vLoZWN6GGBZ2BbwEoP/N2EAo
- TLSH T15F8231394FC24EBAF373CAB285F7D7D6AA31F5A3F4020A1DD58507068813642A985CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Waski payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE